Linux Distros Unpatched Vulnerability : CVE-2026-112894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with saveall...

PT-2026-118683

Name of the Vulnerable Software and Affected Versions Memphis Documents Library plugin for WordPress versions prior to 3.1.6 Description An issue allows unauthenticated attackers to read arbitrary files. This is achieved by sending GET requests containing traversal sequences to the mdocs img...

PT-2026-119440

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An unauthenticated SQL injection exists in the Thin Client Framework TCF servlet of the Oracle Application Object Library. An attacker with network access via HTTP c...

PT-2026-119374

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An issue exists in the Core component of the Oracle Application Object Library. An unauthenticated attacker with network access via HTTP can...

Oracle E-Business Suite: CVE-2026-101552: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Flexfields. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application...

Oracle E-Business Suite: CVE-2026-101767: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object...

Linux Distros Unpatched Vulnerability : CVE-2026-112392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand...

PT-2026-118444

Name of the Vulnerable Software and Affected Versions Raptor RDF Syntax Library versions 2.0.15 through 2.0.16 Description A heap-based buffer overflow occurs in the raptor new term from counted literal function due to the truncation of the language tag length to an unsigned char. An attacker can...

CVE-2016-20100: Improper Limitation of a Pathname to a Restricted Directory

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...

PT-2026-119370

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An issue in the Core component of the Oracle Application Object Library allows an unauthenticated attacker with network access via HTTP to compromise the system...

ALSA-2026:85968 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmi...

aegis-finance-mcp (0.1.1), agent-mcp-server (0.0.4.0) +132 more potentially affected by unknown CVE via uv (>=0.1.45, <=0.12.24)

uv PYPI version =0.1.45, =0.11.0, =0.4.7, =0.0.21, =1.2.0rc5, =0.71.2.dev141039313338033, =0.112.0, =0.1.0, =0.1.2, =1.0.3, =0.5.0.dev0, =0.8.0.dev0 - cdm-ecommerce-backend 0.1.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0173...

1337x (1.2.5), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +4510 more potentially affected by unknown CVE via certifi (>=2019.3.9, <=2026.7.22)

certifi PYPI version =2019.3.9, =0.3.0, =0.0.2, =0.0.6, =1.0.0, =0.1.0, =0.1.3, =0.2.1, =0.1.2, =1.0.0, =0.1.0, =1.0.2rc1, =1.0.2 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0133...

Alibaba Cloud Linux 3 : 0312: gstreamer1-plugins-base (ALINUX3-SA-2026:0312)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0312 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-18297: GStreamer OGG File Parsing...

VulnCheck KEV: CVE-2016-20100

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...

Oracle E-Business Suite: CVE-2026-101700: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Obje...

Oracle E-Business Suite: CVE-2026-101696: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Obje...

Oracle E-Business Suite: CVE-2026-101757: Critical Patch Update

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application...

CLSA-2026-1792454133 TuxCare security update for fast-xml-parser (7 CVEs)

TuxCare rebuilt fast-xml-parser to address 7 CVEs. Fixed in 5.2.5-tuxcare.1...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +10780 more potentially affected by CVE-2026-112390 via pillow (>=7.2.0, <=12.3.0)

pillow PYPI version =7.2.0, =0.0.0, =0.3.0, =0.1.0, =0.2.2, =0.5.0a0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.7 and more Source cves: CVE-2026-112390 Source advisory: SNYK:PYTHON-PILLOW-21277795...